$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa File: 8440a229-96f8-4a89-b068-a25fe646532e.roa (raw, json) Hash identifier: LBUty/vNuR/VNj7yHyXqUc28q6U6lgWeWg+fbcF/9Xw= Subject key identifier: 74:AC:E8:5C:E7:12:08:63:56:85:2B:1F:CD:EE:C5:C1:E3:10:10:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DB611E15CED7158802706D9D5D381413B214213 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa Signing time: Fri 15 Aug 2025 00:11:21 +0000 ROA not before: Fri 15 Aug 2025 00:11:21 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab8:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b6:11:e1:5c:ed:71:58:80:27:06:d9:d5:d3:81:41:3b:21:42:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 15 00:11:21 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=590eae64a7af394cd9a13c363635bf68c0d97b129bb02bca1528b9220d7b5caa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:7b:85:2d:df:c3:20:01:fe:1a:07:e1:d0: f3:71:43:b1:7c:03:6f:4e:58:35:e7:ba:39:42:24: 51:69:7b:af:66:ab:b8:d8:4c:6f:18:54:53:0a:98: a0:17:cd:f4:2a:8c:8c:2a:ce:30:37:b9:d0:c8:6a: 31:80:1b:2a:43:1b:cf:b4:52:74:a1:ec:3b:68:f6: f0:2a:cd:6d:e8:ac:0e:37:89:71:6c:f7:6b:6e:24: 51:7f:45:8b:25:ac:24:5b:31:15:d2:d5:04:dc:7c: 59:74:72:fe:3b:54:d9:2c:08:c7:e7:fb:87:aa:e2: 4a:e4:53:7f:0e:02:f3:c4:c0:22:7f:97:c0:a7:19: f5:cb:e2:61:56:bb:5d:06:fb:ff:96:62:05:e6:fa: 29:fd:44:51:4e:4e:a0:61:e4:45:ea:8b:97:a7:0a: 7d:ab:a9:8d:81:9c:f4:a3:64:ef:ab:74:ff:6d:f2: e0:9b:8f:b3:39:64:9b:c4:22:e6:2c:34:16:fc:3d: 73:32:d5:48:ed:65:9d:d2:7d:b0:08:5c:c9:82:00: f9:b1:19:6f:7a:5c:9a:dd:c4:88:74:f6:05:15:b9: e4:cb:75:47:ad:92:4e:d7:04:bc:9e:70:fc:db:6d: 97:5e:4a:bb:af:91:27:87:4d:ac:f0:d2:54:e9:7b: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:E8:5C:E7:12:08:63:56:85:2B:1F:CD:EE:C5:C1:E3:10:10:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab8:b000::/40 Signature Algorithm: sha256WithRSAEncryption af:e2:48:22:18:08:18:98:50:cc:6d:98:57:1f:d5:05:09:28: 77:20:a5:4a:85:db:3f:42:bd:84:0c:51:75:aa:ba:95:17:3e: 0a:1b:f3:13:da:28:53:44:86:18:a8:fa:67:61:88:a4:00:db: a4:c3:b0:ac:f3:90:e1:d2:88:7c:b6:e1:27:79:96:b4:7f:31: 2e:a6:db:ee:37:5f:11:dc:da:05:ed:59:60:f2:7c:c7:a7:77: 7a:e3:84:fe:c9:93:ee:9c:23:0b:9d:77:85:15:02:e9:d3:28: f1:27:1b:ec:2a:a1:50:a4:a6:41:72:f8:1d:6e:f2:d0:9d:5f: da:49:76:45:0a:c5:95:f7:6a:80:86:33:20:c6:ef:4a:5e:ff: 65:9f:af:99:c1:b6:0d:94:25:0b:8c:e3:74:c3:03:a5:83:43: 9a:57:56:60:d6:b5:ef:58:89:0e:2c:f6:a9:68:ef:6d:be:29: 2c:f9:0e:56:15:c7:36:72:de:1a:ed:24:a1:88:31:7d:6b:88: 31:2f:6b:2c:e8:db:fe:ab:2c:fa:9d:a5:d3:e5:e9:c2:f4:3f: 8d:78:0c:22:04:6c:6b:00:3b:32:25:45:9c:9b:47:5e:03:b5: 90:9e:8f:dd:b6:5b:ba:38:b2:42:54:5e:68:79:77:cf:e5:6e: 88:09:9f:e1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHbYR4VztcViAJwbZ1dOBQTshQhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxNTAwMTEyMVoX DTI1MDkxOTIzNTk1OVowejFJMEcGA1UEBRNANTkwZWFlNjRhN2FmMzk0Y2Q5YTEz YzM2MzYzNWJmNjhjMGQ5N2IxMjliYjAyYmNhMTUyOGI5MjIwZDdiNWNhYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjB7hS3fwyAB/hoH4dDzcUOxfANv Tlg157o5QiRRaXuvZqu42ExvGFRTCpigF830KoyMKs4wN7nQyGoxgBsqQxvPtFJ0 oew7aPbwKs1t6KwON4lxbPdrbiRRf0WLJawkWzEV0tUE3HxZdHL+O1TZLAjH5/uH quJK5FN/DgLzxMAif5fApxn1y+JhVrtdBvv/lmIF5vop/URRTk6gYeRF6ouXpwp9 q6mNgZz0o2Tvq3T/bfLgm4+zOWSbxCLmLDQW/D1zMtVI7WWd0n2wCFzJggD5sRlv elya3cSIdPYFFbnky3VHrZJO1wS8nnD8222XXkq7r5Enh02s8NJU6XufowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHSs6FznEghjVoUrH83uxcHjEBCIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NDBhMjI5LTk2ZjgtNGE4OS1iMDY4LWEyNWZlNjQ2NTMyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauLAwDQYJKoZIhvcNAQELBQADggEBAK/iSCIYCBiYUMxtmFcf 1QUJKHcgpUqF2z9CvYQMUXWqupUXPgob8xPaKFNEhhio+mdhiKQA26TDsKzzkOHS iHy24Sd5lrR/MS6m2+43XxHc2gXtWWDyfMend3rjhP7Jk+6cIwudd4UVAunTKPEn G+wqoVCkpkFy+B1u8tCdX9pJdkUKxZX3aoCGMyDG70pe/2Wfr5nBtg2UJQuM43TD A6WDQ5pXVmDWte9YiQ4s9qlo722+KSz5DlYVxzZy3hrtJKGIMX1riDEvayzo2/6r LPqdpdPl6cL0P414DCIEbGsAOzIlRZybR14DtZCej922W7o4skJUXmh5d8/lbogJ n+E= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:56 2025 by rpki-client